20 matches found
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
EUVD-2018-7059
Malware in sbrugna...
EUVD-2022-30713
Malicious code in bioql PyPI...
Oracle Linux 8 : virt:kvm_utils1 (ELSA-2024-12435)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12435 advisory. - Document CVEs as fixed Karl Heubaum CVE-2023-2700 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364474...
Malicious code in usaa-qtest-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1531 Malicious code in usaa-qtest-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Tricentis qTest Cross-Site Scripting Vulnerability
Tricentis qTest is used by Tricentis to centrally manage and understand software testing activities from conception to production. qTest has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
Cross site scripting
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
CVE-2022-26146 concerns Tricentis qTest prior to 10.4, where an authenticated attacker can trigger a stored cross‑site scripting (XSS) vulnerability through input handling in the WEB application. The Red Hat and other feeds confirm the same description; no concrete exploit specifics, affected fil...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
Tricentis qTest 跨站脚本漏洞
Tricentis qTest is used by Tricentis to centrally manage and understand software testing activities from conception to production. qTest has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by...
CVE-2018-15180
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...
CVE-2018-15180
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...
Open redirect
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...
CVE-2018-15180
The CVE-2018-15180 case affects QASymphony qTest Manager 9.0.0 (qTest Portal). It is an Open Redirect vulnerability reachable via the /portal/loginform redirect parameter, enabling a attacker-controlled URL to redirect users. The public sources in the provided documents confirm the vulnerable com...
CVE-2018-15180
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...
Fedora Core 3 : htdig-3.2.0b6-3.FC3.1 (2005-367)
Tue Apr 19 2005 Phil Knirsch 3:3.2.0b6-3.FC3.1 - Fixed security bug with unescaped output in htsearch and qtest 144127 - Removed .la and .a libs from package 145649 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...